02-13-2009 5:50 PM
We currently use the S_RS_AUTH object to secure Country and Pay Area.
Is it possible to create a second (separate) analysis authorization for a totally different area like Cost Center?
In other words, I would have two analysis authorizations. One with County and Pay Area and another with Cost Center.
It looks like it is possible, but not clearly spelled out in the manual.
Thanks in advance, for any assistance.
Penny
02-14-2009 9:23 AM
Hi Penny,
SAP states that A user that has a profile with the authorization object S_RS_AUTH and has entered 0BI_ALL there (or has included it, for example with the pattern *) has complete access to all data.Soo you have to make the entry as specified above.Hoping your query will be solved.
Have a best day ahead.
02-14-2009 9:23 AM
Hi Penny,
SAP states that A user that has a profile with the authorization object S_RS_AUTH and has entered 0BI_ALL there (or has included it, for example with the pattern *) has complete access to all data.Soo you have to make the entry as specified above.Hoping your query will be solved.
Have a best day ahead.
02-14-2009 10:12 AM
Please stop copy-pasting irrelevant stuff into this forum.
If you think SAP help can be of use just link to the page like this:
[SAPhelp: Assigning Authorization to a User|http://help.sap.com/saphelp_nw70/helpdata/EN/e3/fc8b41b5b3b45fe10000000a1550b0/frameset.htm]
Besides that I think Penny already knows how to assign authorizations to users so I've taken the liberty of hitting the abuse button on your post.
02-17-2009 3:37 PM
Hi everyone,
Sorry if my message was confusing. We do not have a test client so I am leary of testing my theory. I am very familiar with R/3 Security but BI is new to me. But, I believe I've been reading that I can in fact use the same object; S_RS_AUTH, and create multiple and different authorizations.
One authorization for Country and Pay (with 2 fields) and a totally new authorization using the same object for Cost Center (with only one field)..
Does this sound correct?
This is a new theory to me and if I have it right, it will be very beneficial.
Thanks for the feedback.
Penny
02-18-2009 8:38 PM
Thank you all for your help. A consultant built our roles and I was able to do some research and find the answer to my question. Which is yes! You do use the S_RS_AUTH group to create multiple and different authorizations. And then, you can insert one or several different authorizations (same object) into a role.
I knew this was a new, unique concept and glad I finally figured it out.
Thank you all.
Penny